Authorization Bypass Vulnerability in Kibana by Elastic

CVE-2026-63259

What is CVE-2026-63259?

An authorization bypass vulnerability in Kibana allows unauthorized users to access sensitive information. By exploiting user-supplied identifiers, attackers can reference query result data from Kibana Spaces that the requester is not authorized to access, leading to potential information disclosure risks. It is crucial for users to monitor and update their Kibana installations to mitigate this issue.

References